Bad Rabbit Ransomware Analysis Guide

xcvxcvxc

Uploaded by

carmafia111

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as PPTX, PDF, TXT or read online on Scribd

0% found this document useful (0 votes)

7 views12 pages

Bad Rabbit Ransomware Analysis Guide

xcvxcvxc

Uploaded by

carmafia111

We take content rights seriously. If you suspect this is your content, claim it here.

Available Formats

Download as PPTX, PDF, TXT or read online on Scribd

Bad Rabbit (S0606)

Initial Access
• Bad Rabbit spreads through drive-by
downloads on compromised websites,
masquerading as an Adobe Flash installer.
Execution
• Uses a fake Flash update to execute malicious
scripts, employing various Windows API calls
for actions.
Persistence
• Achieves persistence by modifying system
boot settings to load ransomware before the
OS.
Privilege Escalation
• Attempts to gain elevated privileges via UAC
bypass techniques.
Defense Evasion
• Uses legitimate names and locations to
masquerade its activities, encrypts files to
avoid detection.
Credential Access
• Employs Mimikatz to harvest credentials from
the victim's machine.
Discovery
• Enumerates network shares and machines for
further propagation.
Lateral Movement
• Utilizes EternalRomance exploit for SMB to
move laterally across networks.
Command and Control
• Communicates with C2 servers to receive
commands and exfiltrate data.
Exfiltration
• Exfiltrates collected data to attacker-controlled
servers.
Impact
• Encrypts user files and system disks,
demanding ransom for decryption keys.

Bad Rabbit Ransomware Analysis
No ratings yet
Bad Rabbit Ransomware Analysis
2 pages
Bad Rabbit Ransomware Overview
No ratings yet
Bad Rabbit Ransomware Overview
5 pages
Cyber Threat Analysis: Black Basta, Petya, Lapsus$
No ratings yet
Cyber Threat Analysis: Black Basta, Petya, Lapsus$
5 pages
Red Team Simulation Techniques Overview
No ratings yet
Red Team Simulation Techniques Overview
35 pages
AMSI Bypass and Sandbox Evasion Guide
No ratings yet
AMSI Bypass and Sandbox Evasion Guide
109 pages
Move Aside Script Kiddies: Malware Execution in The Age of Advanced Defenses
No ratings yet
Move Aside Script Kiddies: Malware Execution in The Age of Advanced Defenses
38 pages
Malware Development for Ethical Hacking
100% (1)
Malware Development for Ethical Hacking
54 pages
Metasploit Framework Guide for Hackers
No ratings yet
Metasploit Framework Guide for Hackers
10 pages
Bad Rabbit Ransomware Overview
No ratings yet
Bad Rabbit Ransomware Overview
17 pages
Ptrace Injection in User-Land Rootkits
No ratings yet
Ptrace Injection in User-Land Rootkits
40 pages
Cynet 360: Autonomous Breach Protection
No ratings yet
Cynet 360: Autonomous Breach Protection
17 pages
Understanding Malware and Exploits
No ratings yet
Understanding Malware and Exploits
10 pages
Adversary Tactics in Cybersecurity
No ratings yet
Adversary Tactics in Cybersecurity
41 pages
Cyberattack Techniques Overview
No ratings yet
Cyberattack Techniques Overview
7 pages
AV Evasion Module Hide01.Ir
No ratings yet
AV Evasion Module Hide01.Ir
279 pages
Anatomy of Ransomware Operations
No ratings yet
Anatomy of Ransomware Operations
17 pages
Modern Initial Access - Day 1
No ratings yet
Modern Initial Access - Day 1
79 pages
Metasploit Payloads and Architecture Guide
No ratings yet
Metasploit Payloads and Architecture Guide
7 pages
Essential Network Security Tools Guide
No ratings yet
Essential Network Security Tools Guide
2 pages
Offensive Security Techniques Overview
No ratings yet
Offensive Security Techniques Overview
3 pages
EternalBlue RiskSense Analysis-1.2
No ratings yet
EternalBlue RiskSense Analysis-1.2
30 pages
Windows Post-Exploitation Techniques
No ratings yet
Windows Post-Exploitation Techniques
202 pages
DF Exp4
No ratings yet
DF Exp4
6 pages
Metasploit Framework: A Comprehensive Guide
No ratings yet
Metasploit Framework: A Comprehensive Guide
12 pages
Sasser Worm Exploit Analysis
No ratings yet
Sasser Worm Exploit Analysis
4 pages
Advances in Red Team Tactics 2017
No ratings yet
Advances in Red Team Tactics 2017
52 pages
DEFCON 22 Zoltan Balazs Bypass Firewalls Application Whitelists in 20 Seconds UPDATED
No ratings yet
DEFCON 22 Zoltan Balazs Bypass Firewalls Application Whitelists in 20 Seconds UPDATED
60 pages
Gray Hat Hacking Handbook Overview
No ratings yet
Gray Hat Hacking Handbook Overview
22 pages
Mitigating Windows Exploit Trends
No ratings yet
Mitigating Windows Exploit Trends
76 pages
MITRE ATT&CK Hacking Techniques Guide
No ratings yet
MITRE ATT&CK Hacking Techniques Guide
5 pages
Analyzing 3CX Malware Threats
No ratings yet
Analyzing 3CX Malware Threats
4 pages
Practical Malware Analysis Course Overview
No ratings yet
Practical Malware Analysis Course Overview
4 pages
Malware Scripts PDF
No ratings yet
Malware Scripts PDF
22 pages
System Hacking and Online Attacks
No ratings yet
System Hacking and Online Attacks
30 pages
Understanding Malware Types and Threats
No ratings yet
Understanding Malware Types and Threats
56 pages
BlackSuit Ransomware DFIR Analysis
No ratings yet
BlackSuit Ransomware DFIR Analysis
43 pages
Understanding RCE, SQLi, and XSS Vulnerabilities
No ratings yet
Understanding RCE, SQLi, and XSS Vulnerabilities
7 pages
Domain Controller Security Analysis
No ratings yet
Domain Controller Security Analysis
40 pages
DarkPulsar: Malware Framework Insights
No ratings yet
DarkPulsar: Malware Framework Insights
10 pages
SEC504 Master Index
No ratings yet
SEC504 Master Index
21 pages
Understanding AMSI and ESET Integration
No ratings yet
Understanding AMSI and ESET Integration
71 pages
Understanding Fileless Threats in Cybersecurity
100% (1)
Understanding Fileless Threats in Cybersecurity
80 pages
Bypass AV-EDR Solutions Combining Well Known Techniques
No ratings yet
Bypass AV-EDR Solutions Combining Well Known Techniques
42 pages
Metasploit Framework: Deep Dive
No ratings yet
Metasploit Framework: Deep Dive
59 pages
3month Internship 1
No ratings yet
3month Internship 1
4 pages
Vulnerability Exploitation Techniques Guide
No ratings yet
Vulnerability Exploitation Techniques Guide
20 pages
KillSec Ransomware Threat Hunting - MITRE ATT&CK An
No ratings yet
KillSec Ransomware Threat Hunting - MITRE ATT&CK An
18 pages
Malware Dynamic Analysis Techniques
No ratings yet
Malware Dynamic Analysis Techniques
20 pages
Regshot for Malware Dynamic Analysis
No ratings yet
Regshot for Malware Dynamic Analysis
57 pages
Metasploit Framework Basics Overview
100% (1)
Metasploit Framework Basics Overview
271 pages
Vulnerability Analysis: Hailstorm vs N-Stalker
No ratings yet
Vulnerability Analysis: Hailstorm vs N-Stalker
2 pages
Dropzone HTB Machine Writeup
No ratings yet
Dropzone HTB Machine Writeup
13 pages
Active Directory Botnet Exploitation Guide
No ratings yet
Active Directory Botnet Exploitation Guide
46 pages
Advanced Windows Exploitation Course
No ratings yet
Advanced Windows Exploitation Course
4 pages
Bypassing Windows Defender with BadUSB
No ratings yet
Bypassing Windows Defender with BadUSB
35 pages
Windows Kernel Rootkits Training Course
No ratings yet
Windows Kernel Rootkits Training Course
6 pages
Advanced EDR Evasion Techniques 2025
No ratings yet
Advanced EDR Evasion Techniques 2025
8 pages
Defending Active Directory from Ransomware
No ratings yet
Defending Active Directory from Ransomware
19 pages
SANS FOR610 Malware Analysis Notes
No ratings yet
SANS FOR610 Malware Analysis Notes
33 pages

Bad Rabbit Ransomware Analysis Guide

Uploaded by

Bad Rabbit Ransomware Analysis Guide

Uploaded by

Bad Rabbit (S0606)

You might also like